Overview

overview

10

Static

static

10

Extreme In...v4.exe

windows7-x64

10

Extreme In...v4.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    Extreme Injector v4.exe

  • Size

    5.2MB

  • MD5

    fb861911badc09fefa870b817b7515aa

  • SHA1

    b7e2e3db18dcd8841e5865abe5573335b3e3b129

  • SHA256

    68226e7ebd459b6fa1ae0b8ec4b40db09e70d3ee749b4e0f302fe99a1797f91e

  • SHA512

    5edaac2c0c57fc944121167e81325cb8c14ac555eb8f366307f580aa4aa6445b8f604ed4a720c772aa87ab281f12c1db8bbb18f0ffa1b96b2e6140f564f0d0ab

  • SSDEEP

    98304:OIY23Kz0arMyrDIfS43mQHNEVJyZlng4p2VW:HY2+0ctIPmQtEVcn1p/

Score
10/10
zgrat

Malware Config

Signatures

  • Contains code to disable Windows Defender 1 IoCs

    A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.

  • Detect ZGRat V1 1 IoCs
  • Zgrat family
    zgrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Extreme Injector v4.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections